Lucene search

K
jvnJapan Vulnerability NotesJVN:53768697
HistoryDec 17, 2013 - 12:00 a.m.

JVN#53768697: Android OS vulnerable to arbitrary Java method execution

2013-12-1700:00:00
Japan Vulnerability Notes
jvn.jp
21

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.036 Low

EPSS

Percentile

91.7%

Android OS contains a vulnerability where an arbitrary Java method may be executed.

Impact

When viewing a specially crafted page using the standard Android browser or an other application that uses the WebView class, Android OS may be rebooted or arbitrary code may be executed without intent from the user.

Solution

Apply an Update
Update your device according to the information provided by the provider or developer.

Products Affected

  • Android OS version 3.0 through 4.1.x

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.036 Low

EPSS

Percentile

91.7%